Newsletter Archives

• MS-DEFCON 4: Two caveats, but install all outstanding Microsoft patches

  Posted on January 28, 2015 at 20:34 CST by woody • Comment in the Forums

  The two caveats:

  If you use Excel macros, you’re better off avoiding the December patches KB 2726958 for Office 2013, KB 2553154 for Office 2010, and KB 2596927 for Office 2007. Microsoft still hasn’t fixed the bug that breaks various aspect of Excel macro programming and execution, although it has issued a manual fix: KB 3025036.

  If you have an ASUS, Dell, or HP machines, check and see if it’s running an AMD processor. If so, Susan Bradley at Windows Secrets Newsletter — who’s my go-to authority on the subject — advises that you avoid KB 3004365, the January Windows Error Reporting fix. 

  With those two exceptions, Microsoft has either pulled or fixed all of the outstanding patches, as best I can tell. It looks like Avast has fixed whatever was dogging KB 3000850, from November, and the other problems mentioned earlier don’t seem to be generating the level of screams they once did.

  I’m moving us down to MS-DEFCON 4: There are isolated problems with current patches, but they are well-known and documented here. Check this site to see if you’re affected and if things look OK, go ahead and patch.

  My usual boilerplate advice:

  For those of you who are new to this game, keep in mind that… You should always use Windows Update to install patches; downloading and installing individual patches is a clear sign of impending insanity. I always install Windows Defender/Microsoft Security Essentials updates as soon as they’re available – same with spam filter updates. I never install drivers from Windows Update (in the rare case where I can actually see a problem with a driver, I go to the manufacturer’s web site and download it from the original source). I almost never install “Recommended” patches (reader Marty suggests that you uncheck the Windows Update box that says “Give me the recommended updates the same way I receive important updates”). If Windows Update has a patch but the box isn’t checked, DON’T CHECK THE BOX. It’s like spitting in the wind. I use Chrome and Firefox, and only pull out IE when I feel very inclined — but even if you don’t use IE, you need to keep up with its patches.

  Windows Patches/Security December 2014 Black Tuesday, January 2015 Black Tuesday

• Still at MS-DEFCON 2 — but should have an update tomorrow

  Posted on January 28, 2015 at 07:21 CST by woody • Comment in the Forums

  For those of you who are still holding off on installing the December and January patches…

  Except for a few known problems, they’re looking OK. I’m going to wait and see what Susan Bradley says on Thursday in Windows Secrets Newsletter before giving a blanket go-ahead with warnings.

  The warnings will likely include as-yet-unresolved problems with Excel macros and several others.

  Let’s see how it shakes out. In the interim, rest assured that, unless you have state secrets or your work for a foreign intelligence organization, you don’t have much to worry about — there aren’t any mass clobberings going on with the December and January patches.

  Keep your powder dry and use Firefox or Chrome…

  Windows Patches/Security December 2014 Black Tuesday, January 2015 Black Tuesday

• Relief for botched Excel patches KB 2553154, 2726958 missing from January Patch Tuesday

  Posted on January 14, 2015 at 07:15 CST by woody • Comment in the Forums

  And there’s a re-re-re-patch for Internet Explorer.

  Oh boy.

  InfoWorld Tech Watch

  Windows Patches/Security January 2015 Black Tuesday, KB 2553154, KB 2726958